
$ rpki-client -vvf rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386566303a3a2f34342d3434203d3e20313333373938.roa
File: 323430323a353638303a386566303a3a2f34342d3434203d3e20313333373938.roa (raw, json)
Hash identifier: myQVwlY2GOK2vlcLAJ2A+5ppin/dBJkILcCc8dtOz2U=
Subject key identifier: ED:6C:3C:51:7E:C4:F8:F1:BE:09:33:66:C7:80:BD:CB:AD:AC:19:42
Certificate issuer: /CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Certificate serial: 5B0EC6E1457DA481CA831913F1F1A149795AA957
Authority key identifier: 15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386566303a3a2f34342d3434203d3e20313333373938.roa
Signing time: Sun 03 May 2026 03:04:30 +0000
ROA not before: Sun 03 May 2026 02:59:30 +0000
ROA not after: Sun 02 May 2027 03:04:30 +0000
asID: 133798
IP address blocks: 2402:5680:8ef0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0e:c6:e1:45:7d:a4:81:ca:83:19:13:f1:f1:a1:49:79:5a:a9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15FBEACFAED3F9F332597338F402C8726321A5C0
Validity
Not Before: May 3 02:59:30 2026 GMT
Not After : May 2 03:04:30 2027 GMT
Subject: CN=ED6C3C517EC4F8F1BE093366C780BDCBADAC1942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:ed:c1:c1:cd:e6:bf:3d:2a:b2:3d:f9:de:
00:3c:a9:b8:3e:39:b1:ad:c9:b7:cc:b6:90:f0:8a:
31:af:d4:c8:b9:df:bd:0a:c2:51:56:ad:6f:7e:99:
3c:28:96:96:1f:6f:6a:ec:49:69:e5:45:af:28:24:
c5:eb:e5:70:c7:f1:a5:1b:77:43:15:ed:ce:4d:14:
20:d6:3b:93:37:77:b8:91:80:30:87:b7:ef:b0:66:
d8:81:dd:62:b4:a4:ba:3e:a4:5f:c3:5d:de:47:32:
bc:4e:83:e5:bd:40:f8:b5:b0:e8:61:2b:7e:ca:eb:
39:c1:28:e7:bb:48:12:a8:f8:10:a3:f0:ac:2f:72:
85:85:6c:25:f3:f3:c9:ef:22:16:e1:ac:ec:62:b0:
02:db:ba:61:14:e2:67:ee:8b:1d:d7:d4:71:da:da:
50:f8:bb:89:3a:46:80:8b:20:52:da:15:3c:c5:98:
80:58:97:36:8d:c2:3f:5e:e6:00:6a:e3:ae:12:84:
4c:c8:23:37:8b:cf:92:25:8f:a0:94:9d:18:3c:17:
57:e9:51:04:a4:ce:f3:49:23:dd:5c:9b:ca:f2:d4:
b4:19:6e:3d:27:71:b2:e2:95:ed:96:8e:32:35:11:
98:8a:90:5b:17:dc:f5:dc:a3:37:41:6d:a4:dc:40:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6C:3C:51:7E:C4:F8:F1:BE:09:33:66:C7:80:BD:CB:AD:AC:19:42
X509v3 Authority Key Identifier:
keyid:15:FB:EA:CF:AE:D3:F9:F3:32:59:73:38:F4:02:C8:72:63:21:A5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/15FBEACFAED3F9F332597338F402C8726321A5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15FBEACFAED3F9F332597338F402C8726321A5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/323430323a353638303a386566303a3a2f34342d3434203d3e20313333373938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:5680:8ef0::/44
Signature Algorithm: sha256WithRSAEncryption
38:6d:a1:d8:0f:5a:2a:5d:4a:a9:00:25:0d:75:7e:af:ee:4e:
90:2e:18:5a:48:ee:cb:e8:0e:d3:3c:3a:64:9f:14:91:ae:10:
d9:70:55:c1:20:66:96:05:92:ec:76:7b:2e:f5:36:49:e1:79:
59:89:83:97:f4:27:41:c3:60:a5:15:e9:a5:45:28:73:cf:99:
d6:d5:15:4b:29:ea:16:a8:d8:e9:b2:5e:4a:9a:d5:eb:1a:a2:
53:06:98:11:81:7e:39:7e:42:4f:4f:34:0f:4f:e2:51:4e:83:
69:b6:7f:48:3e:73:8c:98:86:a5:33:7c:57:90:d3:d8:a5:bf:
90:d1:6f:69:63:e8:b1:97:44:cf:c7:79:a7:4c:a2:15:ab:59:
86:1c:09:f9:2c:f9:45:aa:e3:57:2a:32:cd:73:cd:7b:8a:74:
dc:66:f0:2c:54:3e:e1:a8:33:2c:4d:6d:51:f7:92:8c:aa:96:
cb:73:a6:9e:f8:3c:2f:1b:0e:35:69:e0:57:eb:dc:ed:9e:de:
91:32:aa:31:35:21:95:2f:7b:d1:b8:ca:39:9d:e9:1b:6a:b6:
26:45:e6:d9:08:1e:10:59:e7:2d:a1:2e:a9:5c:4f:8a:57:31:
61:18:ec:22:65:d3:0a:17:6f:db:30:b3:a1:58:67:5b:00:d2:
7e:64:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:22 2026 by rpki-client